adeo4.map.fastly.net

- Fastly, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 50:47:a9:d4:7d:a7:41:ba:21:8f:4a:0c was issued on by GlobalSign nv-sa.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fastly, Inc.

Organization: Fastly, Inc.
State / Province: California
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 50:47:a9:d4:7d:a7:41:ba:21:8f:4a:0c
Serial Number (int): 24845436518599870609387112972
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 6a:c3:c2:a3:59:31:a6:76:c3:30:82:a8:95:b2:f4:4c:1a:d3:1f:5d
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): 95:f2:e5:e8:41:10:c3:c6:37:0e:36:88:47:a5:2e:64:60:e6:81:80
Fingerprint (sha256): 3f:52:50:f6:03:1d:a9:f3:f8:50:2c:44:4f:38:bb:22:05:69:5d:cd:ee:1b:49:09:0f:12:88:ab:0f:bb:eb:58

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate adeo4.map.fastly.net

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for adeo4.map.fastly.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

adeo4.map.fastly.net
*.api.adeo.com
*.api.prep.adeo.com
api-pub-loyalty-eu.adeo.com
buperformance.adeo.com
last-mile.leroymerlin.fr
my-loyalty-lmpt.adeo.com
rec-instala.leroymerlin.fr

Other certificates including the domain name adeo4.map.fastly.net

(limited to 100 certificates)
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net
adeo4.map.fastly.net

Certificate

The complete raw certificate details for adeo4.map.fastly.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQ5T84PI0T/gr4fu5PaX
0urvdBU50EXTOy67oUjsB/X/Jouh13F+TL0LVsHHUABuqpI74GtQiVsfU04yX8tN
Vzomj9LobkxuAoWuzeEY1wl1bHmDMk1s9YVQLJAjhaE/8SkRPwcYbb7qlZZY4ipG
qPuWpwLwFRzL5kRL8oJZ7rGmKzw9HIG9orrloR5cfjO6TcsexkjrVx5EdzB+FRtz
HaSSV/VtOqsHANdDNh5BCLkozES40meArpVvpyCa1iKzVHM8RjOY8WiiYc1jFagR
F42VUdR8NlZDVSRXfs34dnh7cnmzRrkDwNpSNZkxD4PVbpazNokd1kBNVPidvr1C
5wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 24845436518599870609387112972
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-19 13:40:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-27 17:42:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fastly, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'adeo4.map.fastly.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22351245346819608922184295397469460369662060182324307613470527002197365936208681675359105015005745631414283003712849741252818517659447312939993424601077109240837042985442622714667170238312900941638355847298207515597046692800319797291674601723498940534553823321014367182986146908177755356105326057779169826226035496502573324304180614609451407469771911896322954691931039224865761041826618639896599632813581194631589281335716059165048950008411943036918624508589229025910680677043590574100701972124314519353208677662827660889197225363199801919986029339145294863433034666803961736978880434406662564663372432717881202787047
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (195 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adeo4.map.fastly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.adeo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.prep.adeo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-pub-loyalty-eu.adeo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buperformance.adeo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'last-mile.leroymerlin.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-loyalty-lmpt.adeo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rec-instala.leroymerlin.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6ac3c2a35931a676c33082a895b2f44c1ad31f5d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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